I’m currently looking at the project “Trustworthy or Not.” No matter how good the story is, first go through the GitHub: don’t look at the stars—check whether there have been ongoing submissions recently, whether it’s the same group of people writing it, and whether in the issues there are people genuinely reporting bugs and others genuinely replying. Also, don’t treat the audit report as a talisman—focus on what was found, how it was fixed, and whether there was a re-review. A bunch of low-severity issues doesn’t mean it’s safe; the worst-case scenario is that the critical logic wasn’t covered.

Upgrades and multisig are more realistic: who has the permissions, what the signing threshold is, and whether there’s a timelock (giving everyone time to react). To put it plainly, when chain games hit that kind of crash loop—inflation + studios + a token price spiral collapsing—more often than not it isn’t the code that’s broken; it’s that people get panicked and directly change the rules. In any case, I’d rather move slowly than entrust my fate/risk to a multisig that can wield the knife at any moment.